Hacker News new | ask | show | jobs
by throwDec19 1645 days ago
We get heavily clamped down on access to production by our auditors for Sarbane Oxley reason. Technically we aren't even allowed production data in our dev environment. I dont understand why any organization would allow it. Seems the tech world is still ripe to get sued.
2 comments

Because most of the world (also, as in industries) isn't under those type of laws.
Organizations did (do?) allow it because it's easy. It's also a way to test/debug production problems with actual production data instead of spending time trying to make up data that you hope covers all the actual use cases.
It's also lazy and doesn't respect the privacy of your users.